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8661 

SELF-SERVICE TERMINAL 

The present invention relates to a self-service 
terminal (SST) , such as an automated teller machine (ATM) , 
incorporating an anti-fraud device. The invention also 
relates to a method of preventing fraud at an SST, and to an 
anti-fraud device for use with an SST. 

One type of fraud that occurs at an ATM is for a third 
party to place a small module in front of the ATM ' s 
motorised card reader. The module is professionally 
designed so that it conforms to the appearance of the ATM 
and is not obvious to a user. The module generally has a 
magnetic head for reading the magnetic stripe commonly used 
on banking cards. The module also has electronics 
associated with the magnetic head for reading the data 
stored on the magnetic stripe, and has either a memory for 
storing the read data or transmission apparatus for 
transmitting the read data to the third party. 

When the user enters his card into the motorised card 
reader via the fraudulent module, the motorised card reader 
pulls the card in smoothly so that the genuine magnetic card 
reader can read the card. However, as the card is pulled 
through the fraudulent module by the motorised card reader, 
the card reader in the fraudulent module reads the data on 
the magnetic stripe. 

The user is unaware that his card has been read by the 
fraudulent module because the module is small and 
unobtrusive and because the module does not impede insertion 
or removal of the card. Once the card data is known, the 
third party can re-construct the user's card. A variety of 
techniques may be used to obtain a user's PIN. For example, 
a false keypad overlay may be located above the actual 
keypad, such that when a. user enters his PIN, the sequence 
of digits is recorded by the false keypad. Alternatively, a 
user may simply be observed while using the ATM and his PIN 
noted. if the third party can obtain the user's PIN, then 
the third party has both the card details and the PIN, 



thereby enabling the third party to generate a counterfeit 
card and to make withdrawals from the user's bank account 
without the user's knowledge. 

According to a first aspect of the present invention 
there is provided a self-service terminal characterised in 
that the terminal incorporates an anti-fraud device 
comprising a search coil for detecting metal, where the 
search coil is located in the vicinity of a user interface 
element. 

The search coil is particularly suitable for detecting 
the presence of an alien magnetic card reader module because 
every magnetic card reader head is made of metal. 

The search coil may include a f errite core. 
Alternatively, the search coil may not include a f errite 
core. 

Preferably, the search coil is incorporated into a card 
reader module. conveniently, the search coil is located in 
the throat of the card reader module so that the search coil 
is near to an area liable to attack by a third party module. 

The search coil may be annular in shape so that the 
coil surrounds the entry/exit slot of the card reader 
module. Alternatively, the search coil may be rod-shaped, 
or may have any convenient shape. 

Preferably, the search coil has a short detecting 
range, for example less than 10cm, preferably, less than 
5cm. 

The search coil may be permanently activated. 
Alternatively, the search coil may be activated by the SST 
detecting a user, or by a user inserting his card into the 
card reader module. 

The anti-fraud device may prevent a card from entering 
the card reader module if an alien card reader module is 
detected. Alternatively, the device may initiate an alarm 
and/or provide a warning to the user or to the owner of the 
SST. 
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By virtue of this aspect of the invention, a simple 
metal detector can be used to detect the presence of an 
alien magnetic card reader head, and thereby alert the owner 
of the ATM and/or the user of the ATM to the possibility of 
fraudulent activity by a third party. 

It will be appreciated that the invention is not 
suitable for use with an SST having a metal component or 
fascia in close proximity to the search coil. 

According to a second aspect of the invention there is 
provided an anti-fraud device for use with an SST, 
characterised in that the device comprises a search coil for 
detecting metal, where the device is adapted for being 
located in the vicinity of a user interface element of the 
SST. 

According to a third aspect of the invention there is 
provided a method of preventing fraud at an SST, the method 
being characterised by the steps of: searching for the 
presence of metal in the vicinity of a user interface 
element using a search coil, and generating an alert signal 
in response to detecting metal. 

Preferably, the method further comprises the steps of: 
determining the length of time for which the metal has been 
detected; comparing the length of time for which the metal 
has been detected with a predetermined time; and in the 
event of the length of time exceeding the predetermined 
time, generating an alert signal. 

These and other aspects of the invention will be 
apparent from the following specific description, given by 
way of example, with reference to the accompanying drawings, 
in which: 

Fig 1 is a schematic diagram of an SST in accordance 
with an embodiment of the invention; 

Fig 2 is a schematic diagram of the card reader module 
shown in Fig l; and 
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Fig 3 is a schematic diagram of an alternative 
embodiment of the card reader shown in Fig 1. 

Referring to Fig 1, there is shown a schematic diagram 
of a public access SST 10 in the form of an ATM in 
accordance with an embodiment of the present invention. The 
ATM 10 has a user interface 12 and seven modules 14 
interconnected by a proprietary network 16. 

The modules 14 comprise a terminal controller 14a, a 
display 14b, an encrypting keypad 14c, a card reader 14d, a 
journal printer 14e, a receipt printer 14f , and a cash 
dispenser 14g. The modules 14 operate in a master/slave 
relationship, where the controller 14a is the master that 
controls the operation of the other modules 14b to 14g. 
However, each of the other modules 14b to 14g has a 
processor for operating on received data and for performing 
the specific functions of that module 14. 

Journal printer 14e is internal to the ATM 10 and is 
used by the owner of the ATM 10 for reconciling transaction 
data, and by ATM service personnel in the event of a 
malfunction. 

Referring to Fig 2, there is shown a simplified 
schematic diagram of the card reader module 14d aligned with 
the user interface 12. 

Module 14d is similar to a conventional card reader 
(such as a Sankyo motorised card reader module) , but has a 
search coil 20 wound around a ferrite rod for detecting 
metal (shown in section for clarity) . The search coil 20 is 
located in a throat 2 2 of the module 14d. The search coil 
is of the type conventionally used in metal detector 
apparatus, but is of a suitable size for being accommodated 
within the throat 22 of a card reader module I4d. A 
suitable search coil is provided in a product called ~The 
Bullseye', which is supplied by Whites Electronics UK Ltd, 
35J Harbour Road, Inverness, IV1 1UA. 
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Module 14d has an entry/exit slot 24 at the front of 
the throat 22 for receiving a card into and for ejecting a 
card from the module 14d. 

Slot 24 includes a pair of rollers (not shown) to guide 
an inserted card onto a transport mechanism 26. Transport 
mechanism 2 6 conveys a card 2 8 between the entry/exit slot 
24 and a magnetic card reading head 30. The search coil 20 , 
the card reading head 30, and the transport mechanism 26 are 
all controlled by a controller 32. The controller 32 and 
transport mechanism 2 6 form a transport system. 

The controller 32 is implemented in hardware and 
software, and is responsible for activating the transport 
mechanism 26, interfacing with the terminal controller 14a 
(Fig l) , and sending information received from the reading 
head 30 to the terminal controller 14a via output 34. 
Controller 32 may also implement encryption to provide 
security for the information sent to the terminal controller 
14a • Controller 3 2 also monitors the output of the search 
coil 20 so that if the search coil detects the presence of 
metal for longer than a predetermined time period, for 
example one minute, then the controller 32 informs the 
terminal controller 14a by conveying an alarm signal via 
output 34. 

On receiving an alarm signal, the terminal controller 
14a may alert a remote host or control centre, and/ or the 
controller 14a may put the ATM 10 out of service. 

If a third party attempts to locate a fraudulent card 
reader module on the user interface 12 of ATM 10, in the 
vicinity of a card reader slot 36, then the search coil 20 
will detect the metal used in the fraudulent card reader 
head and send a signal to the controller 32. When the 
signal has been detected for more than the predetermined 
time limit (one minute) the controller initiates an alarm 
signal and conveys this on output 34 to the terminal 
controller 14a. Controller 14a relays this signal to a 



i 



-6- 

control centre (not shown) and removes the ATM 10 from 
service. 

Thus, this embodiment detects fraudulent card reader 
modules and alerts the ATM to the presence of these modules. 

Fig 3 is a schematic diagram of an alternative 
embodiment of the card reader shown in Fig 1. The only 
difference between Fig 2 and Fig 3 is that search coil 120 
in Fig 3 is annular in shape and does not have a ferrite 
core; whereas the search coil 20 in Fig 2 is rod-shaped and 
has a ferrite core. 

Various modifications may be made to the above 
described embodiment within the scope of the invention. For 
example, the predetermined time limit may be more or less 
than one minute. - More than one search coil may be used, for 
example, one search coil may be located in the vicinity of 
the encrypting keypad, another in the vicinity of the cash 
dispense slot. In other embodiments, the search coil may 
have any convenient shape and may or may not include a 
ferrite core. In other embodiments, the controller 32 may 
close the entry/exit slot 24 to ensure that cards 28 cannot 
be inserted therein. In other embodiments, the anti-fraud 
device may be used in conjunction with a camera that is 
directed to the outside of the user interface 12, so that on 
detecting metal in the vicinity of the anti-fraud device, 
the camera may capture an image of the user interface and 
relay this image to security personnel at a remote centre. 



Claims 



1. A self-service terminal (10) characterised in that 
the terminal incorporates an anti-fraud device comprising a 
search coil (20) for detecting metal, where the search coil 
(20) is located in the vicinity of a user interface element 
(36) . 

2. A terminal according to claim 1, wherein the search 
coil (20) is incorporated into a card reader module (I4d) . 

3. A terminal according to claim 1 or claim 2, wherein 
the search coil (20) is located in the throat (22) of the 
card reader module (14d) . 

4. A terminal according to any preceding claim, wherein 
the search coil (20) has an annular shape so that the coil 
surrounds the entry/exit slot (24) of the card reader module 
(I4d) . 

5. An anti-fraud device for use with an SST, 
characterised in that the device comprises a search coil 
(20) for detecting metal, where the device is adapted for 
being located in the vicinity of a user interface element 
(24) of the SST (10) . 

6. A method of preventing fraud at an SST, the method 
being characterised by the steps of: searching for the 
presence of metal in the vicinity of a user interface 
element using a search coil, and generating an alert signal 
in response to detecting metal. 

7. A method according to claim 6, wherein the method 
further comprises the steps of: determining the length of 
time for which the metal has been detected; comparing the 
length of time for which the metal has been detected with a 
predetermined time; and in the event of the length of time 
exceeding the predetermined time, generating an alert 
signal . 
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